Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa
File: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (raw, json)
Hash identifier: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=
Subject key identifier: 40:E6:AF:DE:5C:8F:65:66:19:F4:0F:B7:DC:87:66:3A:AE:29:D0:CA
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 019422FBF888D55C65CD7C12A95851AA4851
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50999
IP address blocks: 109.171.128.0/17 maxlen: 24
2a05:3280::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f8:88:d5:5c:65:cd:7c:12:a9:58:51:aa:48:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40e6afde5c8f656619f40fb7dc87663aae29d0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:df:e0:b1:dd:0b:07:91:8a:b1:8c:12:b7:0a:
d0:b7:ab:de:3e:25:13:e7:3e:24:10:d4:97:42:22:
6e:6b:5b:85:be:29:9e:82:49:25:7a:94:29:29:3c:
42:8c:40:d2:18:e5:08:6a:25:1f:1c:a9:9d:44:56:
36:d5:a7:3a:9e:b5:aa:17:fe:22:af:c4:5b:30:7b:
64:96:82:d9:3c:75:66:67:7e:de:c0:a8:6d:51:16:
a2:cf:f2:49:39:fb:a8:25:3e:5b:86:bd:fd:d2:86:
b4:6f:e3:97:bb:05:c0:4f:40:e8:04:12:ad:fb:a1:
4b:27:11:60:fe:94:34:a1:c4:30:1b:93:5f:fb:f4:
6b:52:9a:ec:13:bc:77:ef:7a:de:d7:95:b4:8b:20:
ab:46:14:cb:1f:9f:2d:56:1a:bb:96:e9:db:44:fb:
16:b8:f4:b6:f8:5a:5e:96:7a:bc:78:0b:bc:21:6f:
94:74:95:ae:1d:2a:44:c9:89:82:71:27:69:9f:55:
cf:90:d5:f9:1f:45:17:76:c0:86:62:fb:1d:c5:84:
14:db:c3:5e:24:ec:88:19:52:f0:c0:48:69:fc:4a:
4d:d9:81:3a:f9:d1:6b:9c:03:61:a3:18:5c:42:d6:
e3:b5:0e:85:74:92:cf:38:7a:c5:da:2f:ee:77:40:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E6:AF:DE:5C:8F:65:66:19:F4:0F:B7:DC:87:66:3A:AE:29:D0:CA
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.171.128.0/17
IPv6:
2a05:3280::/29
Signature Algorithm: sha256WithRSAEncryption
33:95:30:8c:61:21:51:01:b5:af:43:f2:b3:fc:0f:34:26:a4:
0c:be:4a:f5:d5:12:50:5f:ff:dc:f5:65:35:a1:45:43:0a:78:
62:16:12:00:be:16:29:57:14:9e:83:77:17:67:50:41:5a:fb:
02:52:d3:fb:a4:2a:a1:61:54:bd:6e:ee:5f:5b:88:e1:6f:a1:
df:3d:11:8b:df:0d:61:fa:37:fe:11:13:d7:01:76:50:f8:62:
2a:51:0b:ed:fa:78:da:22:62:c8:7c:e1:df:46:71:7a:c0:24:
32:37:7d:7c:c1:a4:69:41:86:01:d8:4f:b7:d8:e1:0b:a7:81:
0a:18:b5:5f:95:55:91:0b:ce:3b:c6:d1:fa:cd:e6:31:ce:c3:
99:e0:78:5a:2a:6c:f5:82:56:3f:28:80:6a:f6:90:c5:ff:9d:
a5:42:2f:ae:23:fa:5e:64:0e:8e:28:1f:2c:47:c3:30:2c:5d:
26:9a:17:dc:c3:c9:8d:f9:ef:43:97:26:8d:e7:7f:44:cc:c6:
05:3b:35:bd:e2:57:28:10:f5:1f:87:c2:04:3c:c6:ae:8c:83:
f0:a4:ec:d5:95:6e:c6:2d:87:72:d8:4b:9f:e8:10:f2:6f:e7:
62:b4:78:2e:c5:ef:1f:1f:98:ee:71:20:7b:c6:9f:6b:cd:e8:
ce:67:a9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:16:16 2025 by rpki-client